CompTIA Security+ (SY0-601) — Question 569
A network administrator deployed a DNS logging tool that logs suspicious websites that are visited and then sends a daily report based on various weighted metrics. Which of the following best describes the type of control the administrator put in place?
Answer options
- A. Preventive
- B. Deterrent
- C. Corrective
- D. Detective
Correct answer: D
Explanation
The correct answer is D, as a DNS logging tool that tracks and reports on suspicious websites functions as a detective control by identifying and logging potentially harmful activities. Preventive controls aim to stop incidents before they occur, deterrent controls are designed to discourage malicious actions, and corrective controls are intended to fix issues after they have happened, none of which apply in this context.